{"push_id":2140721384,"size":1,"distinct_size":1,"ref":"refs/heads/7.x","head":"6ddd8b7185b574cfd82e38d4fab98d69be0e3065","before":"66a8498d81be618f38a7eb2be073644a4d9ab65b","commits":[{"sha":"6ddd8b7185b574cfd82e38d4fab98d69be0e3065","author":{"name":"Johannes Berg","email":"9a5936d824e6835dfe162c5611d10d2cf40ffbad@intel.com"},"message":"mac80211: accept key reinstall without changing anything\n\nWhen a key is reinstalled we can reset the replay counters\netc. which can lead to nonce reuse and/or replay detection\nbeing impossible, breaking security properties, as described\nin the \"KRACK attacks\".\n\nIn particular, CVE-2017-13080 applies to GTK rekeying that\nhappened in firmware while the host is in D3, with the second\npart of the attack being done after the host wakes up. In\nthis case, the wpa_supplicant mitigation isn't sufficient\nsince wpa_supplicant doesn't know the GTK material.\n\nIn case this happens, simply silently accept the new key\ncoming from userspace but don't take any action on it since\nit's the same key; this keeps the PN replay counters intact.\n\nChange-Id: I7576ed8c8df85a767ebf15e74a642063eb34d0f5\nSigned-off-by: Johannes Berg <johannes.berg@intel.com>","distinct":true,"url":"https://api.github.com/repos/OpenKirin/android_kernel_huawei_hi6210sft/commits/6ddd8b7185b574cfd82e38d4fab98d69be0e3065"}]}
{"actor":{"display_login":"Huawei-Dev"}}